2023

OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10

OpenProject is open source project management software. Starting with version 7.4.0 and prior to version 12.5.4, when a

Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid

The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message han

libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPD

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Soc

`effectindex/tripreporter` is a community-powered, universal platform for submitting and analyzing trip reports. Prior t

AsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the MiniMag.asm and bbcod

A prototype pollution vulnerability exists in Strikingly CMS which can result in reflected cross-site scripting (XSS) in

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode siz

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7, all versions start

AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecifie

Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.

Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static R

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4

The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to une

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12

A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura 1

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Bi

The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16

A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A user

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studi

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPad

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macO

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, i

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be ab

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4,

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processi

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4,

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatek

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Bi

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Mon